On Thursday, the Court of Justice of the European Union considered whether the right to be forgotten should be applied to a company register. Denis Kelleher, CIPP/E, writes for Privacy Tracker that while the CJEU found "RTBF could not be generally applied to a company register ... there may be some very limited circumstances where limitations might be imposed on access to personal data held on such a register." Kelleher acknowledges that the ruling is "specific to EU company law," noting, however, that it "may be significant that the CJEU was unwilling to specify any period after which it would, in principle, be unnecessary to retain or allow access to personal data on a company register."
Full Story